Checklist

• [ ] Who can call it?
• [ ] Who is affected?
• [ ] Where can I call it from?
• [ ] What values can be entered?

1. Read the documentation.
2. I read the code from top to bottom, I order the contracts in a way that makes sense: for example, I read the base class contract first before I read the derived class contract. I don't use any tools, but I heavily take notes and scribble all over the code😃
3. I all use it to categorize my notes.
4. After I read the entire codebase once I revisit my notes and resolve any loose ends or things I didn't understand earlier.
5. Afterward, I create my audit report out of these notes.